search

cta-epfl / arcservice

0 stars 1 forks source link

Bump the dependencies group across 1 directory with 6 updates #43

Closed dependabot[bot] closed 2 weeks ago

dependabot[bot] commented 3 weeks ago

Bumps the dependencies group with 6 updates in the / directory:

Package From To
sentry-sdk 2.13.0 2.17.0
importlib-metadata 7.2.1 8.5.0
flask-cors 4.0.1 5.0.0
waitress 3.0.0 3.0.1
jupyterhub 5.1.0 5.2.1
pytest 8.3.2 8.3.3

Updates sentry-sdk from 2.13.0 to 2.17.0

Release notes

Sourced from sentry-sdk's releases.

2.17.0

Various fixes & improvements

2.16.0

Integrations

  • Bottle: Add failed_request_status_codes (#3618) by @​szokeasaurusrex

    You can now define a set of integers that will determine which status codes should be reported to Sentry.

    sentry_sdk.init(
    integrations=[
        BottleIntegration(
            failed_request_status_codes={403, *range(500, 600)},
        )
    ]
)

    Examples of valid failed_request_status_codes:

    • {500} will only send events on HTTP 500.
    • {400, *range(500, 600)} will send events on HTTP 400 as well as the 5xx range.
    • {500, 503} will send events on HTTP 500 and 503.
    • set() (the empty set) will not send events for any HTTP status code.

    The default is {*range(500, 600)}, meaning that all 5xx status codes are reported to Sentry.

  • Bottle: Delete never-reached code (#3605) by @​szokeasaurusrex

  • Redis: Remove flaky test (#3626) by @​sentrivana

  • Django: Improve getting psycopg3 connection info (#3580) by @​nijel

  • Django: Add SpotlightMiddleware when Spotlight is enabled (#3600) by @​BYK

  • Django: Open relevant error when SpotlightMiddleware is on (#3614) by @​BYK

  • Django: Support http_methods_to_capture in ASGI Django (#3607) by @​sentrivana

    ASGI Django now also supports the http_methods_to_capture integration option. This is a configurable tuple of HTTP method verbs that should create a transaction in Sentry. The default is ("CONNECT", "DELETE", "GET", "PATCH", "POST", "PUT", "TRACE",). OPTIONS and HEAD are not included by default.

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.17.0

Various fixes & improvements

2.16.0

Integrations

  • Bottle: Add failed_request_status_codes (#3618) by @​szokeasaurusrex

    You can now define a set of integers that will determine which status codes should be reported to Sentry.

    sentry_sdk.init(
    integrations=[
        BottleIntegration(
            failed_request_status_codes={403, *range(500, 600)},
        )
    ]
)

    Examples of valid failed_request_status_codes:

    • {500} will only send events on HTTP 500.
    • {400, *range(500, 600)} will send events on HTTP 400 as well as the 5xx range.
    • {500, 503} will send events on HTTP 500 and 503.
    • set() (the empty set) will not send events for any HTTP status code.

    The default is {*range(500, 600)}, meaning that all 5xx status codes are reported to Sentry.

  • Bottle: Delete never-reached code (#3605) by @​szokeasaurusrex

  • Redis: Remove flaky test (#3626) by @​sentrivana

  • Django: Improve getting psycopg3 connection info (#3580) by @​nijel

  • Django: Add SpotlightMiddleware when Spotlight is enabled (#3600) by @​BYK

  • Django: Open relevant error when SpotlightMiddleware is on (#3614) by @​BYK

  • Django: Support http_methods_to_capture in ASGI Django (#3607) by @​sentrivana

... (truncated)

Commits


Updates importlib-metadata from 7.2.1 to 8.5.0

Changelog

Sourced from importlib-metadata's changelog.

v8.5.0

Features

  • Deferred import of zipfile.Path (#502)
  • Deferred import of json (#503)
  • Rely on zipp overlay for zipfile.Path.

v8.4.0

Features

  • Deferred import of inspect for import performance. (#499)

v8.3.0

Features

  • Disallow passing of 'dist' to EntryPoints.select.

v8.2.0

Features

  • Add SimplePath to importlib_metadata.all. (#494)

v8.1.0

Features

  • Prioritize valid dists to invalid dists when retrieving by name. (#489)

v8.0.0

... (truncated)

Commits
  • b34810b Finalize
  • 8c1d1fa Merge pull request #501 from Avasam/Pass-mypy-and-link-issues
  • afa39e8 Back out changes to tests._path
  • 8b909f9 Merge pull request #503 from danielhollas/defer-json
  • 2a3f50d Add news fragment.
  • 3f78dc1 Add comment to protect the deferred import.
  • 18eb2da Revert "Defer platform import"
  • 58832f2 Merge pull request #502 from danielhollas/defer-zipp
  • e3ce33b Add news fragment.
  • d11b67f Add comment to protect the deferred import.
  • Additional commits viewable in compare view


Updates flask-cors from 4.0.1 to 5.0.0

Release notes

Sourced from flask-cors's releases.

5.0.0

What's Changed

Full Changelog: https://github.com/corydolphin/flask-cors/compare/4.0.2...5.0.0

4.0.2

What's Changed

New Contributors

Full Changelog: https://github.com/corydolphin/flask-cors/compare/4.0.1...4.0.2

Changelog

Sourced from flask-cors's changelog.

Change Log

Commits


Updates waitress from 3.0.0 to 3.0.1

Changelog

Sourced from waitress's changelog.

3.0.1 (2024-11-28)

Security


- Fix a bug that would lead to Waitress busy looping on select() on a half-open
  socket due to a race condition that existed when creating a new HTTPChannel.
  See https://github.com/Pylons/waitress/pull/435,
  https://github.com/Pylons/waitress/issues/418 and
  https://github.com/Pylons/waitress/security/advisories/GHSA-3f84-rpwh-47g6

With thanks to Dylan Jay and Dieter Maurer for their extensive debugging and

helping track this down.

Commits
  • ae949bb Ready for 3.0.1
  • e435901 Merge commit from fork
  • 810a435 Add documentation for channel_request_lookahead
  • f4ba1c2 Fix a race condition on recv_bytes boundary when request is invalid
  • 7e7f11e Add a new test to validate the lookahead race condition
  • 6943dcf Make DummySock() look more like an actual socket
  • fdd2ecf Merge pull request #445 from Pylons/feature/support-py-3-13
  • dcd18e7 Update exclude matrix
  • 4633ea6 Drop Python 3.8 and add Python 3.13
  • 4584936 Merge pull request #440 from Pylons/fix/ci
  • Additional commits viewable in compare view


Updates jupyterhub from 5.1.0 to 5.2.1

Commits
  • 9749b6e Bump to 5.2.1
  • 979b47d Merge pull request #4935 from consideRatio/pr/cl521
  • c12ccaf changelog for 5.2.1
  • acc51db Merge pull request #4934 from minrk/nicer-import-error
  • 51dcbe4 jupyterhub[singleuser]'s not a thing
  • 6da70e9 informative error on missing dependencies for singleuser server
  • 1cb98ce Merge pull request #4932 from manics/subdowmain-doc
  • f2ecf6a Merge pull request #4930 from consideRatio/pr/startup-service
  • 0a4c3bb Remove unnecessary exc_info from log
  • e4ae7ce Remove out-of-date info from subdomain_hook doc
  • Additional commits viewable in compare view


Updates pytest from 8.3.2 to 8.3.3

Release notes

Sourced from pytest's releases.

8.3.3

pytest 8.3.3 (2024-09-09)

Bug fixes

  • #12446: Avoid calling @property (and other instance descriptors) during fixture discovery -- by asottile{.interpreted-text role="user"}

  • #12659: Fixed the issue of not displaying assertion failure differences when using the parameter --import-mode=importlib in pytest>=8.1.

  • #12667: Fixed a regression where type change in [ExceptionInfo.errisinstance]{.title-ref} caused [mypy]{.title-ref} to fail.

  • #12744: Fixed typing compatibility with Python 3.9 or less -- replaced [typing.Self]{.title-ref} with [typing_extensions.Self]{.title-ref} -- by Avasam{.interpreted-text role="user"}

  • #12745: Fixed an issue with backslashes being incorrectly converted in nodeid paths on Windows, ensuring consistent path handling across environments.

  • #6682: Fixed bug where the verbosity levels where not being respected when printing the "msg" part of failed assertion (as in assert condition, msg).

  • #9422: Fix bug where disabling the terminal plugin via -p no:terminal would cause crashes related to missing the verbose option.

    -- by GTowers1{.interpreted-text role="user"}

Improved documentation

  • #12663: Clarify that the [pytest_deselected]{.title-ref} hook should be called from [pytest_collection_modifyitems]{.title-ref} hook implementations when items are deselected.
  • #12678: Remove erroneous quotes from [tmp_path_retention_policy]{.title-ref} example in docs.

Miscellaneous internal changes

  • #12769: Fix typos discovered by codespell and add codespell to pre-commit hooks.
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 2 weeks ago

Superseded by #44.